$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/f454b771-c258-3f7a-a665-b5cfe4d61240.roa File: f454b771-c258-3f7a-a665-b5cfe4d61240.roa (raw, json) Hash identifier: 5D0CCont0NS94WShYDNJajQnCQBAmOmaR7k+Z04vunA= Subject key identifier: C9:93:01:C8:01:68:E0:20:1B:2D:99:DD:DF:9B:09:8C:0F:8E:44:58 Certificate issuer: /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Certificate serial: 010D0C9F4328584E7958538CB879A19104582A00 Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/f454b771-c258-3f7a-a665-b5cfe4d61240.roa Signing time: Sun 12 Jul 2026 11:59:17 +0000 ROA not before: Sun 12 Jul 2026 11:59:17 +0000 ROA not after: Tue 29 Sep 2026 17:24:06 +0000 asID: 13347 IP address blocks: 16.216.216.0/24 maxlen: 24 16.217.100.0/22 maxlen: 24 16.217.104.0/22 maxlen: 24 16.217.108.0/22 maxlen: 24 16.217.112.0/22 maxlen: 24 16.217.217.0/24 maxlen: 24 136.162.148.0/22 maxlen: 24 136.162.152.0/22 maxlen: 24 136.162.156.0/22 maxlen: 24 136.162.160.0/22 maxlen: 24 136.162.240.0/22 maxlen: 24 136.162.244.0/22 maxlen: 24 136.162.252.0/22 maxlen: 24 161.114.64.0/22 maxlen: 24 161.114.140.0/22 maxlen: 24 161.114.144.0/22 maxlen: 24 161.114.148.0/22 maxlen: 24 161.114.152.0/22 maxlen: 24 161.114.156.0/22 maxlen: 24 161.114.160.0/22 maxlen: 24 161.114.208.0/22 maxlen: 24 192.26.60.0/22 maxlen: 24 192.26.64.0/24 maxlen: 24 192.26.65.0/24 maxlen: 24 192.26.66.0/24 maxlen: 24 192.26.67.0/24 maxlen: 24 192.26.76.0/22 maxlen: 24 192.26.80.0/23 maxlen: 24 192.48.153.0/24 maxlen: 24 192.82.162.0/23 maxlen: 24 192.82.176.0/21 maxlen: 24 192.132.112.0/24 maxlen: 24 192.132.113.0/24 maxlen: 24 192.132.114.0/24 maxlen: 24 192.132.115.0/24 maxlen: 24 192.132.116.0/24 maxlen: 24 192.132.117.0/24 maxlen: 24 192.132.118.0/24 maxlen: 24 192.132.119.0/24 maxlen: 24 192.132.120.0/24 maxlen: 24 192.132.121.0/24 maxlen: 24 192.132.122.0/24 maxlen: 24 192.132.123.0/24 maxlen: 24 192.132.124.0/22 maxlen: 24 198.29.82.0/24 maxlen: 24 198.29.83.0/24 maxlen: 24 198.29.84.0/24 maxlen: 24 198.29.85.0/24 maxlen: 24 198.29.86.0/23 maxlen: 24 198.29.88.0/24 maxlen: 24 198.29.89.0/24 maxlen: 24 198.29.90.0/24 maxlen: 24 198.29.91.0/24 maxlen: 24 198.29.92.0/24 maxlen: 24 198.29.93.0/24 maxlen: 24 198.29.94.0/24 maxlen: 24 198.29.95.0/24 maxlen: 24 199.74.32.0/20 maxlen: 24 199.74.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:79:58:53:8c:b8:79:a1:91:04:58:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Validity Not Before: Jul 12 11:59:17 2026 GMT Not After : Sep 29 17:24:06 2026 GMT Subject: CN=745be027-deb0-40ad-bff1-616cb1a504c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e5:79:aa:ee:4c:ce:be:0d:94:97:ad:b6:45: ed:9d:23:0a:64:d3:00:63:eb:10:7a:1a:b9:27:c0: 29:90:7f:4d:cd:de:9e:5d:a4:ca:c0:41:67:e3:25: 61:01:12:23:76:c5:40:d7:d3:72:fc:64:a6:11:2d: f8:c9:47:96:3b:4c:df:d9:5e:a4:3d:fd:e1:ce:b0: 6f:62:2d:33:6a:fb:39:53:b5:26:e5:3a:5e:ea:2e: a0:0e:05:0c:7a:ed:c0:5e:2f:5c:37:a1:60:ec:37: 53:48:59:76:05:a4:f6:0e:a0:b3:8c:af:77:47:fd: 03:90:22:cb:c4:2e:20:92:0f:dc:1f:7b:84:9d:f3: 79:1d:69:8e:a1:a0:f8:4b:6e:3d:d8:06:fc:92:d3: 11:6f:eb:a4:ca:02:79:53:86:84:73:14:76:ef:a8: 27:93:cc:e6:18:53:da:73:4e:c3:ac:8d:b8:33:c2: cd:1a:71:1b:e6:65:32:01:cf:c9:75:76:9c:02:4b: 91:fb:2d:6b:ae:5c:4a:9f:e1:b3:5f:ad:9d:0c:cf: af:b8:8d:d9:8a:7c:15:4e:38:22:72:c2:ec:20:fc: 4c:d1:8c:5d:10:8e:28:30:cb:d9:4d:d0:bb:ca:60: 99:fd:a5:5b:fc:f2:ef:91:07:a4:b6:e7:bc:5b:d4: 82:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:93:01:C8:01:68:E0:20:1B:2D:99:DD:DF:9B:09:8C:0F:8E:44:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/f454b771-c258-3f7a-a665-b5cfe4d61240.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl X509v3 Authority Key Identifier: keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer sbgp-ipAddrBlock: critical IPv4: 16.216.216.0/24 16.217.100.0-16.217.115.255 16.217.217.0/24 136.162.148.0-136.162.163.255 136.162.240.0/21 136.162.252.0/22 161.114.64.0/22 161.114.140.0-161.114.163.255 161.114.208.0/22 192.26.60.0-192.26.67.255 192.26.76.0-192.26.81.255 192.48.153.0/24 192.82.162.0/23 192.82.176.0/21 192.132.112.0/20 198.29.82.0-198.29.95.255 199.74.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:be:d7:f2:7d:fc:a1:68:73:6e:8c:64:31:b7:30:d8:19:19: 94:00:43:a4:8c:94:c2:51:d4:20:10:2b:c7:ff:df:3e:f8:38: 26:8d:f6:7a:31:51:72:60:4b:bb:f8:8f:9b:e5:94:e7:9b:16: af:fd:2f:94:99:db:2a:36:dc:bb:d5:f8:35:e2:57:22:14:db: d0:ac:e2:3b:a7:62:77:63:c1:81:c6:65:61:b4:8b:80:86:ff: 36:ab:27:1c:f6:d4:6e:75:06:29:b4:23:37:f3:d3:f6:2d:3d: 4a:59:7b:96:c1:e1:81:a9:b4:3a:98:dc:8b:dd:91:29:30:7a: 70:d2:8d:a9:e3:fa:00:0e:40:55:d0:6b:44:04:43:e3:0e:27: c4:30:ec:73:03:cb:45:43:e4:18:05:8b:d9:f6:77:59:d3:54: 7c:b0:66:b6:f7:d9:b8:4e:be:6c:37:9b:e1:57:06:d0:3a:14: 36:62:34:25:7b:97:e2:74:4a:e4:8e:b2:72:ad:fd:b2:a7:02: 9d:49:4a:26:d9:f6:01:9c:da:1f:aa:85:46:ac:21:5c:3f:f7: d2:70:69:30:a6:2b:bc:10:61:9c:6b:73:5c:1f:d3:e7:ef:54: 33:db:25:69:c7:c1:af:d4:19:cd:a3:2e:39:42:fc:b4:8e:8e: 05:ee:20:8b -----BEGIN CERTIFICATE----- MIIG2DCCBcCgAwIBAgIUAQ0Mn0MoWE55WFOMuHmhkQRYKgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFiYzM0YmEtNWFiNC00ZjFhLTk2NWUtM2Q2ZWMwNGNk YmZhMB4XDTI2MDcxMjExNTkxN1oXDTI2MDkyOTE3MjQwNlowLzEtMCsGA1UEAxMk NzQ1YmUwMjctZGViMC00MGFkLWJmZjEtNjE2Y2IxYTUwNGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruV5qu5Mzr4NlJettkXtnSMKZNMAY+sQehq5 J8ApkH9Nzd6eXaTKwEFn4yVhARIjdsVA19Ny/GSmES34yUeWO0zf2V6kPf3hzrBv Yi0zavs5U7Um5Tpe6i6gDgUMeu3AXi9cN6Fg7DdTSFl2BaT2DqCzjK93R/0DkCLL xC4gkg/cH3uEnfN5HWmOoaD4S2492Ab8ktMRb+ukygJ5U4aEcxR276gnk8zmGFPa c07DrI24M8LNGnEb5mUyAc/JdXacAkuR+y1rrlxKn+GzX62dDM+vuI3ZinwVTjgi csLsIPxM0YxdEI4oMMvZTdC7ymCZ/aVb/PLvkQektue8W9SCkwIDAQABo4ID6jCC A+YwHQYDVR0OBBYEFMmTAcgBaOAgGy2Z3d+bCYwPjkRYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YWJj MzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZlYzA0Y2RiZmEvZjQ1NGI3NzEtYzI1OC0z ZjdhLWE2NjUtYjVjZmU0ZDYxMjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWFiYzM0YmEtNWFiNC00ZjFhLTk2 NWUtM2Q2ZWMwNGNkYmZhLzVhYmMzNGJhLTVhYjQtNGYxYS05NjVlLTNkNmVjMDRj ZGJmYS5jcmwwHwYDVR0jBBgwFoAUqEN60KPgFcyfI1WW88UB8LZwZH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YWJjMzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZl YzA0Y2RiZmEuY2VyMIGzBggrBgEFBQcBBwEB/wSBozCBoDCBnQQCAAEwgZYDBAAQ 2NgwDAMEAhDZZAMEAhDZcAMEABDZ2TAMAwQCiKKUAwQCiKKgAwQDiKLwAwQCiKL8 AwQCoXJAMAwDBAKhcowDBAKhcqADBAKhctAwDAMEAsAaPAMEAsAaQDAMAwQCwBpM AwQBwBpQAwQAwDCZAwQBwFKiAwQDwFKwAwQEwIRwMAwDBAHGHVIDBAXGHUADBAXH SiAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAb77X8n38oWhzboxkMbcw2BkZlABDpIyUwlHUIBArx//fPvg4 Jo32ejFRcmBLu/iPm+WU55sWr/0vlJnbKjbcu9X4NeJXIhTb0KziO6did2PBgcZl YbSLgIb/NqsnHPbUbnUGKbQjN/PT9i09Sll7lsHhgam0Opjci92RKTB6cNKNqeP6 AA5AVdBrRARD4w4nxDDscwPLRUPkGAWL2fZ3WdNUfLBmtvfZuE6+bDeb4VcG0DoU NmI0JXuX4nRK5I6ycq39sqcCnUlKJtn2AZzaH6qFRqwhXD/30nBpMKYrvBBhnGtz XB/T5+9UM9slacfBr9QZzaMuOUL8tI6OBe4giw== -----END CERTIFICATE-----Generated at Tue Jul 21 11:35:07 2026 by rpki-client